AWS Cloudsearch does not use the latest (Transport Layer Security) TLS misconfiguration detected in

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_218
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

The Transport Layer Security (TLS) protocol secures transmission of data between servers and web browsers, over the Internet, using standard encryption technology. To follow security best practices and the latest PCI compliance standards, enable the latest version of TLS protocol (i.e. TLS 1.2) for all your AWS Cloudsearch domains.

How to Fix

[source,go]

resource "aws_cloudsearch_domain" "pass" { name = "example-domain"

scaling_parameters { desired_instance_type = "search.medium" }

index_field { name = "headline" type = "text" search = true return = true sort = true highlight = false analysis_scheme = "en_default" }

index_field { name = "price" type = "double" search = true facet = true return = true sort = true } endpoint_options { enforce_https = false tls_security_policy = "Policy-Min-TLS-1-2-2019-07" } }